That is what sessions do, except for:
user exits site -> session id is destroyed
because there is no such thing (you can create a special page that removes the cookie, but there's nothing you can do to require browsers to go there.)
Rather, what happens is that when the same person comes back later without the session ID cookie, they get a new session. The old session data is eventually garbage collected (as a completely unrelated issue.)